SSL/TLS暗号設定ガイドライン - ipa.go.jp

1 SSL/TLS IPA 20150515 EXPO 1 Comodo Hacker Diginotar 2011 RapidSSL 2008 2012 OpenSSL Heartbleed 2014 BEAST 2011 POODLE 2014 FREAK 2015 20150515 EXPO 2 SSL/TLS 20150515 EXPO 3 A { , } { A } A A A 20150515 EXPO 4 (NULL-MD5) (ADH-DES-CBC3-SHA) (EXP-RC2-CBC-MD5) (DES-CBC-MD5) (RC4-MD5) (RC4-SHA) (DES-CBC3-SHA) (DH-DSS-DES-CBC-SHA) (ECDHE-ECDSA-AES128-SHA) (DHE-RSA-CAMELLIA128-SHA) (RC4-SHA) (AES256-SHA) (CAMELLIA256-SHA)

2 (DHE-RSA-AES128-GCM-SHA256) (ECDHE-RSA-CAMELLIA256-GCM-SHA384) 1994 1994 1994 1995 1994 1994 1999 1995 1995 2006 1999 1999 2008 2008 2006 PKI 20150515 EXPO 5 CA CA CA CA CA CA CA CA CA CA CA 20150515 EXPO 6 A A man-in-the-middle man-in-the-browser A

3 OpenSSL Heartbleed OpenSSL Heartbeat Length 20150515 EXPO S ID -A T ID -Z PW-Z PW-Y SSL/TLS ID -X PW-X ID -X PW-X S ID -X PW-X 7 20150515 EXPO 8 Handshake VPN FREAK C3 POODLE 20150515 EXPO 9 P1 P2 P3 P4 Pn-2 =MAC Pn-1 =MAC =Cookie 7 7 7 7 7 7 7 7 Pn =Padding IV DEC DEC DEC DEC DEC IV Cn ENC C1 ENC C2 ENC C3 ENC C4 ENC Cn-2 ENC Cn-1 ENC DEC DEC * * * * * 7 * * 256 1 * * * * * 7 * * Cn-1 C2 P3 * * * * * * * SSL/TLS 20150515 EXPO 10

4 CA PKI 20 SSL/TLS SSL/TLS SSL/TLS Best Practice 2015 3 SSL/TLS 3 OpenSSL Windows Appendix 20150515 EXPO 11 CRYPTREC 20150515 EXPO 12 NICT IPA CRYPTREC WG WG NICT, IPA IPA.

5 NICT WG WG WG 13 SSL SSL CS Mozilla Japan Director IS ICT 20150515 EXPO 3 OS

6 20150515 EXPO 14 20150515 EXPO G2G 256 bit 128 bit 128 bit 256 bit 128 bit 256 bit RC4, Triple DES DHE 2048 bit ECDHE 256 bit DHE 1024 bit ECDHE 256 bit RSA 2048 bit ECDH 256 bit 128 256 AES Camellia RC4 Triple DES GCM GCM, CBC SHA384, SHA256 SHA384, SHA256, SHA1 , 2048 RSA 256 ECDSA SHA256 SHA256.

7 SHA1 15 15 20150515 EXPO 16 Subject Public Key Info Subject Public Key Algorithm RSA 2048 256 CA Certificate Signature Algorithm RSA SHA-256 2048 ECDSA SHA-256 256 20150515 EXPO 17 A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SH A256 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA2 56 TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SH A256 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA2 56

8 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA B TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_CAMELLIA_128_CBC_SHA C TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA 256 TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA25 6 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA 256 TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA25 6 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDH_RSA_WITH_AES_128_CBC_SHA 20150515 EXPO 18 D TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SH A384 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256

9 TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA3 84 TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SH A384 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA3 84 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA E TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_CAMELLIA_256_CBC_SHA F TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA 384 TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA38 4 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA 384 TLS_ECDH_RS